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^S^ • We generalize the notion of cyclic codes by using generator poly- 

C^ . nomials in (non commutative) skew polynomial rings. Since skew 

polynomial rings are left and right euclidean, the obtained codes share 
most properties of cyclic codes. Since there are much more skew-cyclic 
codes, this new class of codes allows to systematically search for codes 
K^ I with good properties. We give many examples of codes which improve 

^1} ' the previously best known linear codes. 

g ■ Introduction 

o 

"^ I Let Fq be a finite field of q elements. A linear (n, A;)-code over ¥q is a k- 

-^ I dimensional vector subspace C of the vector space 

^ = F," = {(ao,...,a„_i)|a, gFJ. 

k> I In the following we use the polynomial representation of the code. In the 

H i polynomial representation of the code C, the code words (oq, Oi, . . . , a„_i) G C 

are coefficient tuples of elements a„_iX"'~^ + . . . + aiX + ao G Wq[X]/{X"- — l) 
which are multiples of one element G E A (the generator polynomial). A 
linear code C is a cyclic code if 

(ao, ai, . . . , a„_i) G C =^ (ctn-i? c^O; Oi, ■ ■ ■ , an-2) £ C. 
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In this paper we want to generalize the notion of cychc codes to the notion 
of ^-cychc codes. 

Definition 1 Let ¥g be a finite field and 9 an automorphism ofFg. A 9- 
cyclic code is a linear code Cq with the property that 

(ao,ai,...,a„_i) G Ce =^ {9{an-i),9{ao),9{ai), . . . ,9{an-2)) e Cq. 

In order to generalize the notion of cyclic codes (corresponding to the 
case where 9 is the identity) we consider skew polynomial rings of automor- 
phism type which we now define. Starting from the finite field F^ and an 
automorphism 9 of F^ one defines a ring structure on the set 

¥g[X, 9] = {a„X""^ + . . . + aiX + ao | a^ G Fg and n G N} . 

This is the set of formal polynomials where the coefficients are written on 
the left of the variable X. The addition in Fq[X, 9] is defined to be the usual 
addition of polynomials and the multiplication is defined by the basic rule 
Xa = 9{a)X {a G Fg) and extended to all elements of Fq[X, 9] by associativity 
and distributivity. Those rings are well known (cf. IHC]) and, since over a 
finite field all derivations are inner, they are the most general "polynomial 
rings" with a commutative field of coefficients where the degree of a product 
of two elements is the sum of the degrees of the elements. 

Our goal is to give a skew polynomial representation of 6'-cyclic codes. 
We will show that the code words (ao, Oi, . . . , a„-i) of a 6'-cyclic code Cq are 
coefficient tuples of elements of an-iX"~-^ + . . . + aiX + ao G ¥q[X,9]/{X'^ — l) 
which are left multiples of one element G G Fg[X, 9]/{X"' — 1) (the generator 
polynomial). This property also guaranties that the encoding procedure of a 
6'-cyclic code is as easy as for cyclic codes. 

We will also show by concrete examples that the class of 6'-cyclic codes 
is a very large class of linear codes (containing the cyclic codes) and that 
this class contains codes with good properties. Therefore the class 6'-cyclic 
codes is an interesting class of linear codes which are easy to construct in a 
systematic way. In a final section we will show how to decode some 6'-cyclic 
codes. 



1 Generalities on ^-cyclic codes 

Properties of ^-cyclic codes are closely related to properties of ¥g[X, 9]. The 
ring ¥g [X, 9] is a left and right euclidean ring whose left and right ideals are 



principal j3]. Here right division means that for Pi{X),P2{X) G F^[X, ^] 
which are non zero, there exist unique polynomials Qr{X), Rj.{X) G Fq[X, 9] 
such that 

Pl{X) = Qr{X) ■ P2{X) + Pr{X). 

liPr{X) = then P2{X) is a right divisor of Pi(X) in FJX, 9]. The definition 
of left divisor in F5[X, ^] is similar using the left euclidean division. In the 
ring Fg[X, ^] left and right gcd and 1cm exist and can be computed using 
the left and right euclidean algorithm. We denote JF c Fg the subfield of 
elements of Fg that are left fixed by 9. An element P G Fg[X, ^] is central 
(i.e. commutes with all elements of Fg[X, 9]) if and only if P = Y^iLo ^iX^'"" G 
J-'[X] where a = | < ^ > | is the order of 9 [l], Theorem 11.12). In particular 
central elements of Fg[X, 9] are the generators of two-sided ideals in Fg[X, 9]. 
Therefore, if | < ^ > | divides n, then (X" — 1) C Fg[X, ^] is a two-sided 
ideal. In the non-commutative ring Fq[X, 9]/{X"' — l) we identify the image of 
P G FJX, 9] under the canonical morphism ^: FJX, 9] -> FJX, ^]/(X'" - 1) 
with the remainder P^ of P by the right division with X" — 1 in Fq[X, 9] and 
we denote ipi^) still by X. This representation gives a canonical form for 
the elements of FjX, ^]/(X" - 1). 

Lemma 1 LetWg be a finite field, 9 an automorphism of¥q andn an integer 
divisible by the order \ < 9 > \ of 9. The ring Fg[X, 0]/(X" — 1) is a principal 
left ideal domain in which left ideals are generated by ip{G) where G is a right 
divisor o/ X" - 1 in FjX, 9] . 

Proof. The proof is an exact copy of the commutative case only taking care 
of left and right. Let / be a left ideal of FJX, ^]/(X" - 1). If J = {0} then 
/ = (0). Otherwise denote Gr & I a. monic non zero polynomial of minimal 
degree in /. By abuse of notation we identify the element Gr G / with itself 
in Fg[X, 9] and denote this element G (i.e. G G Fg[X, 9] is of degree < n and 
iIj{G) = Gr). Let Pr G / be an arbitrary element of / which we again identify 
with P G Fg [X, 9] . Performing a right division of P by G in F^ [X, 9] we get 

P = Q-G +R, where deg(P) < deg(G) 

from which we get ip{R) = Pr — ip{Q) ■ Gr G /. By minimality of the degree of 
Gr we must have ipi^R) = 0, showing that P^ = ip{Q) ■ Gr and thus / = (Gr). 

■ 

For a linear code C of length n we denote C(X) the skew polynomial 
representation of C. In this representation we associate to a code word a = 



(oq, ai, . . . , fln-i) £ C the element a{X) = a„_iX" -^ + . . . + aiX + oq in 
FJX,^]/(X" - 1). If a G C, then we denote a(X) G FJX,^]/(X" - 1) the 
skew polynomial representation of a. 

Theorem 1 Let ¥q be a finite field, 9 an automorphism of Fg and C he a 
linear code over Fg of length n. // | < 6^ > |, the order of 6, divides n, then 
the code C is a 6-cyclic code if and only if the skew polynomial representation 
C{X) ofC IS a left ideal (G) C FJX,^]/(X" - 1). 

Proof. By the above Lemma we have to show that C(X) is a left ideal of 
Fg[X, 6']/(X"' — 1). Since C is a linear code, C(X) is an additive group. Let 
a = (ao, . . . , a„_i) G C, then 

Xa(X) = Xao + X(aiX) + --- + X(a„_iX"-^) 

= 9{ao) X + (0(ai) X) X + ■ ■ ■ + (^(a„_i) X) X"-^ 

= ^(a„_i) + e{ao) X + ■ ■ ■ e{an-2) X"~^ + ^(a„_i) (X" - 1). 

Therefore in Fq[X, ^]/(X"— 1) (i.e. working modulo X"— 1) we have X a(X) = 

9{an-i) + 0{ao) X H 6'(a„_2) X"-^ Since C is 6'-cyclic we have X a(X) G 

C(X) and by iteration and linearity we get for all P^ ^ JFij[-^5 ^]/(^"~l) that 
P^ ■ a(X) G C(X). This shows that C(X) is a left ideal of FJX, ^]/(X" - 1). 
In the opposite direction the properties of a left ideal show that the coeffi- 
cient vectors of the elements of a left ideal (G) C Fq[X, 0]/(X"' — 1) form 
a linear subspace and from a(X) G {G) =^ X a(X) G (G) we get from the 
above computation that the corresponding linear code is ^-cyclic. ■ 

2 Finding good codes 

An obvious technique for finding good linear codes (codes with a large mini- 
mum distance d) is a random search. With this technique, the probability to 
find a code with better parameters than the best known codes, e.g. according 
to Brouwer's table [2j (http://www.win.tue.nl~aeb/"), is very small. Many 
of the best known codes have some additional structure (e.g. are cyclic codes 
or are constructed using cyclic codes). Therefore a search within the ^-cyclic 
codes seems more promising than a random search — especially as, since 
Fg[X, 6] is not a unique factorization ring, there are many ^-cyclic codes for 
a given set of parameters (n, k). 



We implemented a factorization procedure in the CA-System MAGMA j2]. 
This procedure outputs all right skew- factors of X" — 1, producing the pos- 
sible generator skew polynomials for ^-cyclic codes. A right factor of degree 
n — k oi X"' — 1 generates a linear code with parameters [n, k). li 6 is not 
the identity (corresponding to the cyclic codes), then Fg[X, 6*] is in general 
not a unique factorization ring. In this case there are typically much more 
right factors than in the commutative case, producing many ^-cyclic codes. 
Once the code is given, its minimum distance can be calculated using the 
existing MAGMA procedures. This latter operation is very time consuming 
for larger codes, hence we restricted our search to smaller codes with ground 
fields F4) and Fg and to 5000 codes in the cases, where more skew factors for 
a given parameter set (n, k) have been found. With this technique we ob- 
tained a minimum distance one larger than the previously known best code 
(according to Brouwer's table) for 8 parameter sets over F4. Those codes 
have been added to the MAGMA list of known codes. In most cases we 
found many different codes with the same minimum distance; in Tabled the 
code parameters, the number of codes found with these parameters (No), and 
a generating polynomial for one code in this class of parameters are given. 

For codes over Fg we managed to improve the lower bound for the best 
known codes in one case (cf. Table Ej). Due to the larger ground field and the 
larger codes, the calculation of dmin is even more time consuming than in the 
previous case. Therefore we stopped our search for good codes a.t n = 44. 



[Tl, k, dminj 


No 


9 


(56,30,14) 


1 


x^^ + x^"^ + x^^ + a x" + a^ x^^ + a'^ x^ + a'^ x^ + ax'^ + 
a'^x^ + ax^ + a'^x^ + x'^ + a'^x + a^ 


(48, 19, 17) 


2 


a^ x^^ + ax^^ + ax'^'^ + a x^^ + x^^ + x^^ + a x^^ + a x^° + 
ax^ + a'^x'^ + x^ + x^ + x^ + a^ x^ + x"^ + a^ 


(48,25,13) 


2 


x23 + ^2 3,22 _^ ^21 _^ ^ ^20 _^ ^ ^,19 _^ ^2 ^18 _^ ^ 2,17 _^ ^ ^,14 _^ 

a^ x^^ + a^ x^^ +x'^ + ax'^ + x^ + x^ + a^x'^ + 1 


(42,17,16) 


3 


^25 _^ 3,23 _^ ^ ^22 _^ ^21 _^ ^20 _^ ^19 _^ ^18 _^ ^,2 ^17 _^ ^2 ^16 _^ 

a x^^ + a x^^ + x^^ + x^^ + x^° + x^ + a^ x^ + a^ x^ + x^ + 
ax + 1 


(42,23,11) 


92 


x^'^ + x^'' + a^x^'° + ax^^ + a^x^'^ + ax^'''' + ax^^ + a^x^^^ + 
ax'^ + x'^ + ax^ + a^ x^ + ax'^ + ax + a^ 


(40,16,15) 


6 


x^'^ + a x^^ + x^^ + x^^ + a^ x^*^ + a x^^ + a x^^ + a x^''' + 
x^^ + x^^ + x^3 + a x^^ + a^ x^° + x^ + x^ + x^ + a^ x^ + 
a x^ + a^ x"^ + a x^ + a^ 


(36,20,10) 


13 


x^^ + a^ a;i5 _^ 3,13 _^ ^2 ^12 _^ 3,11 _^ ^ 3,10 _^ 3,9 _^ ^2 ^8 _^ 
a x'' + a x*" + a x*^ + a^ x^ + a^ x^ + 1 


(30,16,9) 


422 


^14 ^ ^13 ^ ^^11 + ^10 + 3,9 ^ ^8 ^ ^^7 ^ ^fj ^ ^^5 ^ 

a^ x*^ + a^ x^ + a X + a^ 



Table 1: Parameters and generating polynomial of skew-cyclic codes over F4. 
Here a a zero of y^ + y + 1 and Q the Frobenius automorphism. For each 
code the minimum distance has been improved by 1 according to Brouwer's 
table 



\J^i <^i (^vnin) 



No 



9 



(44,20,17) 



X- 



24 



+ x^^ + x2° + a'^ x^^ + a^ x^^ + 2 x^'^ + a^ x^^ + a^ x^^ + 



a^ x^^ + 2 x^2 + a^ x^° + a'^ x*^ + 2 x^ + a^ x^ + a^ x^ + 
a''^ x^ + a '' x^ + a^ X + 2 



Table 2: Parameters and generating polynomial of skew-cyclic codes over Fg. 
Here a a zero oiy^ — y — 1 and 9 the Frobenius automorphism. The minimum 
distance has been improved by 1 according to the best known codes. 
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3 Decoding 

In the following, instead of a general decoding procedure, we will adapt 
(to skew BCH codes) the algorithm for decoding BCH codes with designed 
distance (see pages 27 — 33 or [Hj) to ^-cyclic codes. We denote a G F^ a 
primitive (g — l)-th root of unity. We suppose that n is even, g = 2"^ where 
m = n and that 6{a) = a^. Consider a 6'-cyclic code C whose generating 
polynomial is G G Fg [X, 6] which is a right divisor of X" — 1 in F^ [X, 6] . We 
suppose that C is a skew BCH codes of designed distance d G N, which in this 
context just means that X — a'^ is a right factor of G for A; G {1, . . . , (i — 1}. 
In the following section we give an example of a skew BCH codes which is 
not even cyclic in the classical sense, showing that this class extends the class 
of BCH codes. The following result allows us to switch to commutative rings 
for some considerations : 

n-l 

Property 1 For P = V^a^X''' G Fq[X, 6'], /? G F^ andr G F^ the remainder 

k=0 

of the right division of P by X — f3, then r = P{f3) where P is a (classical) 
•polynomial given by P = N^a^ -2^ ^^ G ^q[z] 

k=0 

Proof. The remainder of the right division of -P(X) by X — /3 is 

r = ao + aip + a2(3d{(3) + a^(3e{(5) e^{(3) + ■■■ + a„_i/3 ■ ■ ■r-2(/5) 



ra-l 



Replacing e^{(3) with (3'^\ we get r = ^ au (3^"'^ = P{(3) . 

fe=0 

Therefore the remainder of the right division of P G Fq[X, 9] by X — /5 (and 
the image of the remainder in Fg[X, ^]/(X" — 1)) can be interpreted as the 
evaluation of the polynomial P in the commutative ring Fg[2;] at /3 G F^. 
Using this property, we can prove like in the classical case (jUj, Theorem 6.2) 
that the distance of the code is at least equal to the designed distance d. 

Property 2 Let n even, g = 2", a a primitive {q — l)-th root of unity. Let 
C be a 9-cyclic code with 9{q) = o? . Let G G Fg[X, ^] be its generating 
polynomial such that G is a right divisor of X"" — 1 in ¥q[X, 9] and X — a^ 
is a right factor of G for k E {1, . . . ,d— 1}. 
The distance of the code C is equal to its designed distance d. 



Proof. According to property (Q), a test matrix for the code is 



where 



Hi 



H 



ao ai 



Hi 
H2 



a 



\ 







d-i 



a\ 



Old-l 

2 



n-l \ 



a 



d-l 



an 



a. 



"n-l 






and a,- 



a 



'^ . If we consider all the possible sets oi d—\ columns extracted 
from the n columns of iJi, we get square matrices of order d — \. Their 
determinants are non zero if and only if Oj — a^ is non zero for j < i < n. 



But a,- — ai = 4^ a 



-2J 



1 and < 2* - 2^ < 2" - 1, so as 2" - 1 is the 



order of a, we get non zero determinants. So each set of rf — 1 columns of 
Hi are linearly independant, one cannot find any word of weight less than d 
and the minimum distance of the code is at least d. ■ 

We can now adapt almost entirely the classical decoding algorithm for BCH 
codes which in described in jH] pages 27 — 33. 

Let a G FJX, ^]/(X"-l) be a code word and let b = a+e G ¥g[X, e]/(X"-l) 
be the received word where e = e^^ X*^ + ■ ■ • + Cj^ X*'' is the error polynomial 
with ii < 12 < ■ ■ ■ < ir and where r <t := ^-^. 
One defines the syndrome polynomial of e as the polynomial 

d-l 

Sa{z) = ^Rem(e,X - a'')z''~^ G ¥g[z]. 

k=l 

Here the remainder Rem(e,X — a'^) is to be computed in Fg[X, ^]. As 
Rem(e,X — a^) = Rem(6, X — a^), one can compute Sd{z) using the re- 
ceived polynomial b. The syndrome polynomial can also be written 



Sd{z)=J2~e{ 



a'') z^-^ 



k=l 



where e{z) = ^ d^ z^'' G ¥q[z] and jk = 2**= - 1. 

k=l 

One also defines the pseudo-locator polynomial 

r 

a{z) =Y[{l-a^''z) 



fe=i 



and the evaluator polynomial 



r 



wiz] = > Cj, a-" \\(i — a^''z) 



1=1 k^l 

Knowing a{z) enables us to find the jk, so that we have almost located the 
positions ik of the errors in e. This point is in fact the only difference with 
the classical algorithm. 

Once we know the jk and the evaluator polynomial w{z), we can recover 
all the Cjj, using the following equality 

Ci^ = a~^^ w{a^^^) ]^(1 - «■""■"=), A; e {1, . . . , r}. 
Let us now define 

oo oo 

S{z) = J2 e(«'') z''-^ = Sd{z) + z''-^ Y^ e(«^+^+'') z"" 

fc=l k=0 

Like in [2] (theorem /.8 page 28), one gets the classical 'key equation': 

a{z) S{z) = w{z) 
which one can write 

a{z) Sd{z) + v{z) z''-^ = w{z) 



where v{z) = a{z) y ^ e{ 



a'^+i+^l^^ 



fc=0 



Following [^ (theorem J. 11 page 32) we apply Euclid's algorithm to the 
polynomials Sd{z) and z'^~^ in ^q[z]. We construct the sequences (rj(^)), 
{Ui{z)) and {Vi{z)) defined by 

r^i{z)=z^-\ ro{z)=Sd{z) 

U^^{z) = 0, Uo{z) = 1, \/_i(z) = 1, Vo{z) = 
and at each step i, 

ri{z) = ri_2{z) - qi{z) ri^i{z) with deg(ri(2;)) < deg(ri_i(2;)) 

9 



U,{z) = f/,_2(^) - q^{z) U.^iiz), V,{z) = V,^2iz) - q,{z) V,^i{z). 

and we stop as soon as we find k such that deg{rk_i) > t and deg(rfc) < t. 
We get 



Uu{z) 


Sa{z) + Vu{z)z''-' 




'^'^ ^ urn 




.,(.) - ''^'^ 



and 

w(z) = , , 

Now from the roots of the pseudo-locator polynomial oi^z) we get j;, / G 
{1, . . . , r} and from the evaluator polynomial wi^z^ we get 

e^^ = a-J' w{cr^') JJ(1 - a^'^-^O, / e {1, . . . , r}. 

So we have found the coefficients of e and we have almost found the positions 
ii of the errors. For each j;, we get a finite number of possibilities ii solutions 
to the equation 

ji = 2*' - 1 (mod n) 

So we get a finite number of possible errors, which we test until we find e 
such that 6 + e is a code word. As the distance of the code is d we are sure 
that such a e is unique and so we have decoded. 



4 Worked example 

Let n = m = 10 and let a such that c^ '^ = 1. The polynomial 

G = X^ + a345 X' + a643 x^ + a^^s ^3 ^ ^ero ^2 ^ ^1020 ^ ^ ^777 

divides X^^ + 1 to the right in F2io[X, 6]. Therefore it is the generator poly- 
nomial of a ^-cyclic code C of length 10 over F210. Since X — a'^ is a right 
factor of G for k G {1, . . . , 6}, the code C is of designed distance d = 7. One 
can check that this skew BCH code is not cyclic in the classical sense. 
We consider the code word a given by 
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a{X) = a654 X9 + a547 j^S + „650 j^7 + ^16 ^6 + „567 ^5 + ^29 ^4 + „87 j^3 + 

^696 ^2 + ^252 ^ + ^555^ 

an error 

The received perturbed code word 6 = a + e is 

^252^ + a557. 

Knowing the received polynomial h and d = 7,we can compute the syndrome 
polynomial 

Sr{z) = a^^^ z'' + a^""^ z^ + a^^^ z"" + a'^^^ z^ + a^u ^ + ^406 

Applying Euclid algorithm to Sj{z) and z^ in F2io[z] with t = 3, we get the 
pseudo-locator polynomial a{z) 

a{z) = a'^'^z'' + a^^^z^ + a'^^z+l 

and the evaluator polynomial w{z) 

w{z)=a''^z' + a'''z + a^'''. 

From the roots 1, a^^^ and a^^^ of the polynomial alz) we get the value of r 
(r = 3) and the values of ji,J2,J3 '■ 

Ji = 0,j2 = 511,j3 = 255. 

We can now find the values of the coefficients of e via the polynomial w : 

We have now to locate exactly the positions of the errors. For each k in 
{1, 2, 3}, we solve the equations 

2^'=-l=jfc (mod 10). 

2^1 - 1 = (mod 10) ^ ii (mod 10) = 
2^2-1 = 511 (mod 10) ^ i2 (mod 10) G {1, 5, 9} 
2^3 - 1 = 255 (mod 10) ^ ig (mod 10) G {4, 8} 

11 



So the list of the possible errors is 

[^682 ^4 ^ ^341 X + ^682^ ^682 ^8 + ^341 ^ ^ ^682^ 
«341 ^5 + ^682 ^4 ^ ^682^ ^682 ^8 + ^341 ^5 + ^682^ 
^341 ^9 ^ ^682 ^4 ^ ^682^ ^341 ^9 ^ ^682 ^8 + ^682] 

The only one such that g divides 6 + e to the right is 

^341 v9 I ^682 v8 i ^682 

For this code, 5000 random tests have been made (each random test takes 
a random code word, a random error of weight at most three and checks 
whether the corrected word is equal to the code word). 
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